For those that don't know: you can go into DOS and type netstat -an and it gives you some information. I don't understand all of this. Things like TCP and UDP, Local Address (I'm sure I know what this is), Foreign Address (this should be the site you are connecting to), and state. Under state is usually Listening and Established.

What are some other things we can do with 'netstat'? I know you can also use 'netstat -a', and 'netstat -n'. Anything else?

I hope this topic is okay and discussing it doesn't get into anything bad like how to hack stuff. I was wanting to know because I think someone tried to hack my computer using an Earthlink DSL from Atlanta Georgia. http://www.tombraiderforums.com/images/smilies/redface.gif I used it (netstat -an) to see if I could find something out. But Zone Alarm blocked whoever it was.

In fact I have had up to 4 attempts in a span of about 20 minutes. :mad: Lamer. http://www.tombraiderforums.com/images/smilies/violent.gif

Capt. Murphy, i copied from a book i have here:
Switch = What it does
-a = Displays all open connections and ports.
-e = Displays Ethernet statistics about packets transmitted and received. Can be combined with the -s switch.
-n = Displays the adresses and ports in numeric, IP adress form.
-o = Displays the process identifier (PID) that owns each connection.
-p proto = Displays the connections used by the protocol, which can be IP, IPv6, ICMP, ICMPv6, TCP, TCPv6, UDP, or UDPv6.
-r = Displays the network's routing table.
-s = Displays statistics for each protocol. It lists all statistics for all protocols, but you can list only those for a specified protocol if you combine it with the -p switch.
interval value = Run netstat repeatedly, pausing value seconds between each new display. To stop the display, press Ctrl+C.